Files
LokiStack/run.sh
T
Logan.LiandClaude 327e282356 refactor: 前后端目录结构模块化 + v2 优化移植与缺陷修复
前端:
- src/srv/api → src/api,按域分文件夹(auth/cluster/host/storage/deployment/collector)
- 新增 http.ts 引擎(http.get/post/put/delete),域模块改用语义化调用
- index.html 增加 favicon(匹配应用 logo 的 emerald + Activity 脉冲)

后端分层增强(保留包名):
- 新增 repository/:从 models 拆出 JsonDB 持久化层(InitDB/GetDB/Shutdown/RequestSave)
- 新增 dto/:从 controllers 抽出各域请求契约(带 binding 校验)
- 新增 pkg/crypto、pkg/jwt:从 utils 拆出安全原语(外部 jwt 别名 jwtv5 避免冲突)
- models 只留领域实体 + sanitizer;utils 只留 gin/应用相关(response/errors)

v2 优化移植与缺陷修复:
- 移植密钥分离/SSH TOFU/并发写安全/Loki 生产级配置/Docker 加固
- 修复 deployment.go 并发丢更新、Helm values 重复键、EncryptField 哨兵、loki-gateway 端点等审计缺陷
- 实现真正的优雅关停(main.go http.Server + signal + repository.Shutdown)
- 修复登录契约:后端返回 accessToken,前端 auth.ts/Login.tsx 对齐
- 补 crypto/jwt/repository 单元测试(含并发写回归)

验证: go build/vet/test 全绿;npm run build 通过;登录→鉴权→优雅关停冒烟通过

Co-Authored-By: Claude <noreply@anthropic.com>
2026-06-30 10:46:26 +08:00

338 lines
9.8 KiB
Bash
Executable File

#!/bin/bash
# LokiDeploy 启动脚本
# 一键启动前后端服务,支持日志轮转
# 用法: ./run.sh [start|stop|restart|status|frontend|backend|help]
set -e
# ============================================================
# 配置区
# ============================================================
PROJECT_NAME="LokiDeploy"
BACKEND_PORT=8080
FRONTEND_PORT=3000
BACKEND_DIR="backend"
FRONTEND_DIR="frontend"
BACKEND_BIN="bin/lokideploy"
# 日志配置
MAX_LOG_FILES=3
MAX_LOG_SIZE=$((50 * 1024 * 1024)) # 50MB
# ============================================================
# 通用函数
# ============================================================
RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
BLUE='\033[0;34m'
NC='\033[0m'
info() { echo -e "${BLUE}[INFO]${NC} $1"; }
success() { echo -e "${GREEN}[SUCCESS]${NC} $1"; }
warning() { echo -e "${YELLOW}[WARNING]${NC} $1"; }
error() { echo -e "${RED}[ERROR]${NC} $1"; }
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
cd "$SCRIPT_DIR"
# PID 文件
BACKEND_PID_FILE="$SCRIPT_DIR/$BACKEND_DIR/.backend.pid"
FRONTEND_PID_FILE="$SCRIPT_DIR/$FRONTEND_DIR/.frontend.pid"
# 检查端口是否被占用
check_port() {
lsof -ti:$1 2>/dev/null | head -1
}
# 释放端口
kill_port() {
local pids=$(lsof -ti:$1 2>/dev/null || echo "")
if [ -n "$pids" ]; then
info "释放端口 $1..."
echo "$pids" | xargs kill -9 2>/dev/null || true
sleep 1
fi
}
# 日志轮转(仅启动时调用)
rotate_log() {
local log_file=$1
[ ! -f "$log_file" ] && return 0
local file_size=$(stat -f%z "$log_file" 2>/dev/null || stat -c%s "$log_file" 2>/dev/null || echo "0")
if [ "$file_size" -gt "$MAX_LOG_SIZE" ]; then
[ -f "${log_file}.${MAX_LOG_FILES}" ] && rm -f "${log_file}.${MAX_LOG_FILES}"
for i in $(seq $((MAX_LOG_FILES - 1)) -1 1); do
[ -f "${log_file}.${i}" ] && mv "${log_file}.${i}" "${log_file}.$((i + 1))"
done
mv "$log_file" "${log_file}.1"
info "日志已轮转: $log_file"
fi
}
# 检测 Go
detect_go() {
if command -v go &> /dev/null; then
echo "go"
elif [ -f "$HOME/go/bin/go" ]; then
echo "$HOME/go/bin/go"
else
echo ""
fi
}
cleanup() {
:
}
# ============================================================
# 后端服务 (Go + Gin)
# ============================================================
start_backend() {
info "正在启动后端服务..."
cd "$SCRIPT_DIR/$BACKEND_DIR"
mkdir -p logs
rotate_log "logs/backend.log"
kill_port $BACKEND_PORT
local GO_CMD=$(detect_go)
if [ -z "$GO_CMD" ]; then
error "Go 未安装,请先安装 Go 1.23+"
return 1
fi
# 编译二进制(若不存在或源码更新)
if [ ! -f "$BACKEND_BIN" ]; then
warning "编译后端二进制..."
CGO_ENABLED=0 GOPROXY=https://goproxy.cn,direct $GO_CMD build -ldflags="-s -w" -o "$BACKEND_BIN" . || {
error "后端编译失败"
return 1
}
fi
# 启动(后台)
export SERVER_PORT=$BACKEND_PORT
export DATA_DIR="$SCRIPT_DIR/data"
export JWT_SECRET="${JWT_SECRET:-lokideploy-secret-key-change-in-production}"
# v2 安全模型:AES 加密需要独立密钥(用于主机密码/私钥/kubeconfig 等敏感字段)。
# config.go 在 ENCRYPTION_KEY 缺失或 <32 字符时会 log.Fatal 拒绝启动,故此处提供开发默认值。
if [ -z "${ENCRYPTION_KEY:-}" ]; then
warning "未设置 ENCRYPTION_KEY,使用开发默认值。生产环境请通过 .env 或环境变量提供独立随机密钥!"
export ENCRYPTION_KEY="lokideploy-dev-encryption-key-change-me!!"
fi
nohup "./$BACKEND_BIN" >> logs/backend.log 2>&1 &
echo $! > "$BACKEND_PID_FILE"
# 等待服务启动
local retries=0
while [ -z "$(check_port $BACKEND_PORT)" ]; do
retries=$((retries + 1))
if [ $retries -ge 30 ]; then
error "后端服务启动超时,请检查日志: $BACKEND_DIR/logs/backend.log"
return 1
fi
sleep 1
done
success "后端服务已启动 (PID: $(cat "$BACKEND_PID_FILE"), 端口: $BACKEND_PORT)"
info "API: http://localhost:$BACKEND_PORT/api/v1"
info "默认登录: admin / admin123"
return 0
}
# 等待进程退出:先 SIGTERM 优雅关停,超时再 SIGKILL
graceful_kill() {
local pid=$1
local name=$2
local grace=${3:-8}
if [ -z "$pid" ] || ! kill -0 "$pid" 2>/dev/null; then
return 0
fi
info "正在优雅停止 $name (PID: $pid)..."
kill -TERM "$pid" 2>/dev/null || true
local i=0
while kill -0 "$pid" 2>/dev/null && [ $i -lt $((grace * 2)) ]; do
sleep 0.5
i=$((i + 1))
done
if kill -0 "$pid" 2>/dev/null; then
warning "$name 未在 ${grace}s 内退出,强制终止..."
kill -KILL "$pid" 2>/dev/null || true
fi
success "$name 已停止"
}
stop_backend() {
if [ -f "$BACKEND_PID_FILE" ]; then
local pid=$(cat "$BACKEND_PID_FILE" 2>/dev/null || echo "")
graceful_kill "$pid" "后端服务" 8
rm -f "$BACKEND_PID_FILE"
fi
# 兜底:清理仍占用端口的残留进程(非 PID 文件管理的)
kill_port $BACKEND_PORT
}
# ============================================================
# 前端服务 (Vite Dev Server)
# ============================================================
start_frontend() {
info "正在启动前端服务..."
cd "$SCRIPT_DIR/$FRONTEND_DIR"
mkdir -p logs
rotate_log "logs/dev.log"
kill_port $FRONTEND_PORT
if [ ! -d "node_modules" ]; then
warning "node_modules 不存在,正在安装依赖..."
npm install || { error "依赖安装失败"; return 1; }
fi
nohup npm run dev >> logs/dev.log 2>&1 &
echo $! > "$FRONTEND_PID_FILE"
# 等待服务启动
local retries=0
while [ -z "$(check_port $FRONTEND_PORT)" ]; do
retries=$((retries + 1))
if [ $retries -ge 30 ]; then
error "前端服务启动超时,请检查日志: $FRONTEND_DIR/logs/dev.log"
return 1
fi
sleep 1
done
success "前端服务已启动 (PID: $(cat "$FRONTEND_PID_FILE"), 端口: $FRONTEND_PORT)"
info "前端地址: http://localhost:$FRONTEND_PORT"
return 0
}
stop_frontend() {
if [ -f "$FRONTEND_PID_FILE" ]; then
local pid=$(cat "$FRONTEND_PID_FILE" 2>/dev/null || echo "")
graceful_kill "$pid" "前端服务" 5
rm -f "$FRONTEND_PID_FILE"
fi
kill_port $FRONTEND_PORT
}
# ============================================================
# 命令
# ============================================================
stop() {
info "正在停止服务..."
stop_backend
stop_frontend
info "所有服务已停止"
}
show_status() {
info "服务状态:"
if [ -n "$(check_port $BACKEND_PORT)" ]; then
success "后端服务: 运行中 (PID: $(check_port $BACKEND_PORT), 端口: $BACKEND_PORT)"
else
warning "后端服务: 未运行"
fi
if [ -n "$(check_port $FRONTEND_PORT)" ]; then
success "前端服务: 运行中 (PID: $(check_port $FRONTEND_PORT), 端口: $FRONTEND_PORT)"
else
warning "前端服务: 未运行"
fi
}
show_help() {
echo "$PROJECT_NAME 启动脚本"
echo ""
echo "用法: ./run.sh [命令]"
echo ""
echo "命令:"
echo " start 启动前后端服务 (默认)"
echo " stop 停止前后端服务"
echo " restart 重启前后端服务"
echo " backend 仅启动后端服务"
echo " frontend 仅启动前端服务"
echo " status 查看服务状态"
echo " help 显示帮助信息"
echo ""
echo "端口:"
echo " 后端 API: http://localhost:$BACKEND_PORT/api/v1"
echo " 前端页面: http://localhost:$FRONTEND_PORT"
echo ""
echo "示例:"
echo " ./run.sh # 启动所有服务"
echo " ./run.sh stop # 停止服务"
echo " ./run.sh backend # 仅启动后端"
}
# ============================================================
# 主入口
# ============================================================
trap cleanup EXIT INT TERM
main() {
local command=${1:-start}
case "$command" in
start)
info "========== $PROJECT_NAME 启动脚本 =========="
if [ -z "$(detect_go)" ]; then
error "Go 未安装,请先安装 Go 1.23+"
exit 1
fi
if ! command -v npm &> /dev/null; then
error "npm 未安装,请先安装 Node.js"
exit 1
fi
if start_backend && start_frontend; then
echo ""
success "========== 所有服务已启动 =========="
info "前端地址: http://localhost:$FRONTEND_PORT"
info "后端 API: http://localhost:$BACKEND_PORT/api/v1"
info "默认登录: admin / admin123"
echo ""
info "使用 './run.sh stop' 停止服务"
info "使用 './run.sh status' 查看状态"
else
error "服务启动失败"
exit 1
fi
;;
stop)
stop
;;
restart)
stop
sleep 2
main start
;;
backend)
info "========== $PROJECT_NAME (仅后端) =========="
start_backend
show_status
;;
frontend)
info "========== $PROJECT_NAME (仅前端) =========="
start_frontend
show_status
;;
status)
show_status
;;
help|--help|-h)
show_help
;;
*)
error "未知命令: $command"
show_help
exit 1
;;
esac
}
main "$@"